Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft
File:                     7cFfZVhGJAinV1N2WyxxplTxZ24.mft (raw, json)
Hash identifier:          dIT8rUlJgJYvMal4wCZ2zFFouyT9wjmanlzHpzpUXNU=
Subject key identifier:   2E:AD:82:54:AE:19:82:D1:B9:7C:56:76:17:94:02:0C:BB:0D:94:86
Authority key identifier: ED:C1:5F:65:58:46:24:08:A7:57:53:76:5B:2C:71:A6:54:F1:67:6E
Certificate issuer:       /CN=edc15f6558462408a75753765b2c71a654f1676e
Certificate serial:       01989600364A57D6F5C042955197D6FB5F7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cFfZVhGJAinV1N2WyxxplTxZ24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft
Manifest number:          1367
Signing time:             Sun 10 Aug 2025 22:00:52 +0000
Manifest this update:     Sun 10 Aug 2025 22:00:52 +0000
Manifest next update:     Mon 11 Aug 2025 22:00:52 +0000
Files and hashes:         1: 7cFfZVhGJAinV1N2WyxxplTxZ24.crl (hash: keK/D1F0ubpRzpGlLg2NF2tGVgbBMFjI/bCeKkVE88o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7cFfZVhGJAinV1N2WyxxplTxZ24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 22:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:00:36:4a:57:d6:f5:c0:42:95:51:97:d6:fb:5f:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edc15f6558462408a75753765b2c71a654f1676e
        Validity
            Not Before: Aug 10 22:00:52 2025 GMT
            Not After : Aug 11 22:00:52 2025 GMT
        Subject: CN=2ead8254ae1982d1b97c56761794020cbb0d9486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:08:64:a8:e6:82:7c:af:08:1e:fe:d0:cb:08:
                    b7:90:b7:19:8f:7b:d2:4b:f0:32:94:d9:95:6f:72:
                    8d:47:8d:64:64:70:49:e0:83:97:09:75:d0:52:c5:
                    6f:64:61:a8:88:95:31:17:d5:5c:06:22:11:7d:dc:
                    bb:6e:67:25:63:66:fe:d2:c8:98:db:96:73:79:b0:
                    fa:1b:45:eb:a7:bd:5a:c5:6c:17:af:39:36:eb:55:
                    f7:f2:aa:04:a6:64:3a:a1:65:cc:bc:d9:df:61:b9:
                    c4:ee:ce:52:90:f6:86:51:43:e1:4c:70:b3:0c:4f:
                    ea:9e:46:6f:e5:d3:86:fc:ed:71:db:44:43:43:60:
                    12:61:20:c2:d6:82:91:6c:0e:cb:07:6e:c9:86:8e:
                    de:f3:4d:e9:7b:8a:d0:55:07:76:ae:56:8f:40:03:
                    34:3a:80:42:ce:0a:6e:4b:2c:7a:6e:85:06:cd:af:
                    c9:d2:8a:91:34:68:53:a4:95:90:5f:ae:8f:a4:a3:
                    97:02:a8:90:f5:4a:20:12:00:42:00:b4:85:24:a2:
                    89:96:94:3b:a2:44:98:89:97:37:ad:60:68:39:40:
                    38:7d:f1:18:2f:67:03:41:c1:04:cd:ba:88:8b:4a:
                    62:c7:59:95:bf:d0:bc:13:a8:9b:cb:dc:ff:67:79:
                    12:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AD:82:54:AE:19:82:D1:B9:7C:56:76:17:94:02:0C:BB:0D:94:86
            X509v3 Authority Key Identifier:
                keyid:ED:C1:5F:65:58:46:24:08:A7:57:53:76:5B:2C:71:A6:54:F1:67:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cFfZVhGJAinV1N2WyxxplTxZ24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:2c:d7:70:cd:aa:f3:4f:15:f6:28:be:08:7f:f8:e7:6c:b6:
         8f:f2:84:c8:8b:92:a2:d8:3a:dc:c9:4e:17:be:cf:77:70:58:
         0a:a3:ce:59:b8:4d:60:c9:f9:b6:21:55:43:3f:91:37:48:8e:
         85:86:fb:40:ca:10:fa:85:81:9d:53:f3:92:7e:a6:bf:6b:8c:
         0a:53:98:f8:32:24:dd:75:a1:11:8f:83:b0:77:43:3d:54:35:
         0d:8c:6f:d2:d3:e7:ab:b1:40:15:1c:df:f6:80:09:73:53:17:
         36:0a:d9:4a:8c:09:1e:d6:31:11:67:0a:93:bf:1a:7a:72:43:
         74:20:f7:df:e4:16:50:4a:ef:72:e3:48:b7:cf:24:69:23:61:
         a1:4d:06:ee:4b:9f:ff:81:62:d3:2b:c9:db:02:1e:4a:18:ba:
         65:b1:e2:7b:6e:74:8f:9c:89:4e:a7:ce:7c:f3:d7:1a:72:16:
         5b:ce:9b:55:0d:dc:a9:e3:53:47:4b:54:36:0c:d9:9d:08:0c:
         3b:6b:f4:44:70:5c:4b:f8:6d:cc:61:0b:16:0f:e7:e6:d5:9b:
         8d:64:13:9f:1f:6b:cb:f7:57:16:91:c7:6f:54:9c:df:07:17:
         f7:17:4a:db:eb:c9:5e:77:84:77:80:5e:b2:00:fe:c5:b6:d7:
         15:61:10:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:13:24 2025 by rpki-client